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CLAIMS 

What is claimed is: 

1. A software-implemented method for replacing a loadable software 
module in an operating system, comprising: 

maintaining a reference count for a given software module loaded in 
the operating system; 

loading a replacement software module for the given software module 
into the operating system; 

receiving a reference for the given software module after the 
replacement software module is loaded into the operating system; and 

directing the reference for the given software module to the 
replacement software module when the reference count is greater than zero. 

2. The method of Claim 1 further comprises maintaining a reference 
count for the replacement software module. 

3. The method of Claim 1 wherein the step of directing the reference to 
the replacement software module further comprises incrementing a reference count 
for the replacement software module. 

4. The method of Claim 1 further comprises unloading the given software 
module when the reference count is zero. 
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5. The method of Claim 1 wherein the step of maintaining a reference 
count further comprises incrementing the reference count when an application 
invokes a requested function provided by the given software module and 
decrementing the reference count when the requested function is completed by the 
given software module. 

6. The method of Claim 1 wherein a reference is further defined as a 
requested function provided by the given software module. 

7. The method of Claim 1 wherein the step of maintaining a reference 
count is performed by a reference count manager. 
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8. A software-implemented method for replacing a loadable software 
module in an operating system, comprising: 

maintaining a reference count for a loadable software module 
associated with a kernel of the operating system; 

linking a replacement software module for the loadable software 
module into the kernel of the operating system; 

receiving a resource request for the loadable software module after the 
replacement software module is linked into the kernel; 

directing the resource request for the loadable software module to the 
replacement software module when the reference count is greater than zero; 
and 

unlinking the loadable software module from the kernel of the operating 
system when the reference count is zero. 

9. The method of Claim 8 maintaining a reference count for the 
replacement software module. 

1 0. The method of Claim 8 wherein the step of directing the reference to 
the replacement software module further comprises incrementing a reference count 
for the replacement software module. 
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1 1 . The method of Claim 8 wherein the step of maintaining a reference 
count further comprises incrementing the reference count when a kernel control path 
starts using the loadable software module and decrementing the reference count 
when the kernel control path stops using the loadable software module. 

12. The method of Claim 8 wherein the kernel of the operating system is 
further defined as a Linux kernel. 

13. The method of Claim 12 wherein the loadable software module is 
further defined as an access control module operating within the Linux Security 
Module framework. 

14. A software-implemented system for coordinating replacement of a 
loadable software module residing in an execution environment, comprising: 

a reference count manager residing in the execution environment and 
operable to maintain a reference count for the loadable software module; and 

a kernel residing in the execution environment and operable to load a 
replacement software module into the execution environment, the kernel 
adapted to receive a resource request for the loadable software module after 
the replacement software module is loaded and operable to direct the 
resource request to the replacement software module when the reference 
count is greater than zero. 



12 



Attorney Docket No. 9432-000273 

15. The computer-implemented system of Claim 14 wherein the reference 
count manager is operable to maintain a reference count for the replacement 
software module. 

16. The computer-implemented system of Claim 14 wherein the kernel is 
in data communication with the reference count manager to access the reference 
count upon receipt of the resource request for the loadable software module. 

17. The computer-implemented system of Claim 14 wherein the kernel is 
further operable to unload the loadable software module when the reference count is 
zero. 

18. The computer-implemented system of Claim 14 wherein the reference 
count manager increments the reference count when a kernel control path starts 
using the loadable software module and decrements the reference count when the 
kernel control path stops using the loadable software module 

19. The computer-implemented system of Claim 14 wherein the kernel of 
the operating system is further defined as a Linux kernel. 

20. The computer-implemented system of Claim 14 wherein the loadable 
software module is further defined as an access control module operating within the 
Linux Security Module framework. 
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